How do I assess my records program's maturity level and figure out what to improve next?

Assessing maturity is less about a single score and more about understanding, honestly, how consistent and reliable your program is across the records lifecycle. A useful assessment compares what your policies say against what actually happens day to day, then turns the gaps into a prioritized improvement plan.

Pick a frame of reference

Maturity models generally describe a progression: from ad hoc (informal, person-dependent practices), to defined (documented policies and schedules), to managed (consistently followed and monitored), to optimized (measured, audited, and continuously improved). Established frameworks and standards give you a stable benchmark so your judgment is grounded rather than improvised.

Assess across the whole lifecycle

Rate your program candidly in each of these areas:

• Governance and policy — Are roles, authority, and accountability documented and current?
• Retention schedules — Are schedules complete, legally grounded, and actually applied to systems?
• Creation and capture — Are records reliably identified and captured at the point of creation, including email and other electronic formats?
• Storage and security — Are records protected, accessible, and appropriately classified?
• Disposition — Do transfers and destruction happen on schedule, with documentation?
• Training and culture — Do staff know their responsibilities, and is compliance monitored?

For each, ask whether the practice is undocumented, documented, consistently followed, or measured. The lowest-scoring areas usually reveal where risk concentrates.

Turn findings into priorities

Rank gaps by risk and value, not by ease. A missing or unenforced retention schedule, records that cannot be located, or disposition that never happens are higher-priority than cosmetic improvements. Weigh legal exposure, the volume of records affected, and the cost of inaction.

Then sequence the work. Foundational items, clear policy, an accurate and applied retention schedule, come first, because later improvements depend on them. Set a small number of concrete targets, assign owners, and re-assess on a regular cadence so maturity becomes a trend you can show, not a one-time snapshot.

Document each assessment so progress is visible and repeatable. For broader context on lifecycle requirements and related obligations, see the federal records hub.